Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6403_us	Dec. 4, 2023, 5:58 p.m.	Dec. 4, 2023, 6 p.m.

Size	260.5KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`ccb3c4b013b8ff72994e4c799503894f`
SHA256	`ff4ed729ebb2b43278de37bf45c4be315cb46c276786f0a091f875b182d0f675`
CRC32	`A15294FB`
ssdeep	`3072:2fhWD2hkga6oomHn7WwB6nWF0NVp6Yt9DxHFL8YL1m61DGOHMDtRlcn:CsDgRmHn71B6gA0YjDxl35tlsDj`
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) Malicious_Packer_Zero - Malicious Packer PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check

syncUpd.exe "C:\Users\test22\AppData\Local\Temp\syncUpd.exe"
1476

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

The file contains an unknown PE resource name possibly indicative of a packer (1 event)

resource name

RUWATUFOLUSAJOMEYOVUZOLIYE

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 4255496695 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x758631df syncupd+0x1c0fc @ 0x41c0fc exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1
__exception__ Dec. 4, 2023, 5:58 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7580e825 syncupd+0x1c0ff @ 0x41c0ff exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77907cbf registers.esp: 1628460 registers.edi: 13434880 registers.eax: 4294967288 registers.ebp: 1628512 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 1188	1

Allocates read-write-execute memory (usually to unpack itself) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory Dec. 4, 2023, 5:58 p.m.	process_identifier: 1476 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 77824 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00cec000 process_handle: 0xffffffff	1	0	0

Foreign language identified in PE resource (16 events)

name

RUWATUFOLUSAJOMEYOVUZOLIYE

language

LANG_SERBIAN

filetype

ASCII text, with very long lines, with no line terminators

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798630

size

0x0000196b

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_ICON

language

LANG_SERBIAN

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x00798150

size

0x00000468

name

RT_STRING

language

LANG_SERBIAN

filetype

data

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x0079ab58

size

0x00000164

name

RT_STRING

language

LANG_SERBIAN

filetype

data

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x0079ab58

size

0x00000164

name

RT_STRING

language

LANG_SERBIAN

filetype

data

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x0079ab58

size

0x00000164

name

RT_GROUP_ICON

language

LANG_SERBIAN

filetype

data

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x007985b8

size

0x00000076

name

RT_GROUP_ICON

language

LANG_SERBIAN

filetype

data

sublanguage

SUBLANG_SERBIAN_LATIN

offset

0x007985b8

size

0x00000076

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section

{u'size_of_data': u'0x00016e00', u'virtual_address': u'0x00021000', u'entropy': 7.185901408085545, u'name': u'.data', u'virtual_size': u'0x0076e330'}

entropy

7.18590140809

description

A section with a high entropy has been found

entropy

0.352601156069

description

Overall entropy of this PE file is high

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ Dec. 4, 2023, 5:58 p.m.	tid: 1188 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 30 AntiVirus engines on VirusTotal as malicious (30 events)

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
FireEye	Generic.mg.ccb3c4b013b8ff72
CAT-QuickHeal	Ransom.Stop.P5
Skyhigh	BehavesLike.Win32.Lockbit.dh
Sangfor	Ransom.Win32.Save.a
K7AntiVirus	Trojan ( 00516fdf1 )
K7GW	Trojan ( 00516fdf1 )
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Kaspersky	VHO:Backdoor.Win32.Mokes.gen
Tencent	Trojan.Win32.Obfuscated.gen
Trapmine	malicious.high.ml.score
Sophos	Troj/Krypt-VK
SentinelOne	Static AI - Malicious PE
Google	Detected
Kingsoft	malware.kb.a.1000
Gridinsoft	Ransom.Win32.STOP.tr!n
ZoneAlarm	VHO:Backdoor.Win32.Mokes.gen
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R626207
Acronis	suspicious
VBA32	BScope.Trojan.Yakes
Cylance	unsafe
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:m0NAlql6hCzYEU3asNppdg)
MaxSecure	Trojan.Malware.300983.susgen
Cybereason	malicious.04376e
DeepInstinct	MALICIOUS

syncUpd.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All